libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...

EUVD-2026-84186

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88412

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

ROS-20260921-73-0114

The vulnerability of the Go programming language is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2026:4003-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4003-1 advisory. - CVE-2026-59184: invalid heap pointer, causing out-of-bounds or use-after-free writes bsc1276849. -...

Linux Distros Unpatched Vulnerability : CVE-2026-65969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, a...

SUSE SLED15 / SLES15 Security Update : gegl (SUSE-SU-2026:3996-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3996-1 advisory. This update for gegl fixes the following issue: - CVE-2026-18300: integer overflow in HDR file parsing can allow...

CVE-2026-88412

CVE-2026-88412 is an integer overflow vulnerability in the _BulkInsert_ReadProperty function (file bulk_insert.c) of FalkorDB (a Redis module), version 4.20.1 . A remote attacker can supply a crafted input to trigger the overflow, resulting in a Denial of Service . The CVSS 3.1 score is 5.3 (Medi...

PT-2026-105618

Out-of-bounds Access in libvterm Resize Handling in Vim = v8.1.0688...

PT-2026-96296

Name of the Vulnerable Software and Affected Versions FalkorDB version 4.20.1 Description An integer overflow occurs in the BulkInsert ReadProperty function within the /bulk insert.c component. This flaw allows an attacker to trigger a Denial of Service DoS by providing a specially crafted input...

EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2026-3889)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may...

CVE-2026-88412

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88412: Integer Overflow or Wraparound

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EulerOS Virtualization 2.10.1 : gawk (EulerOS-SA-2026-3831)

According to the versions of the gawk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Integer overflow vulnerability has been found in 'builtin.c' program file of gawk. This issue may lead to memory exhaustion on the...

Linux Distros Unpatched Vulnerability : CVE-2026-91142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Cockpit. An integer overflow vulnerability in the dolastlog function, specifically in the offset calculation for lastlog entries on ILP32...

SUSE SLES15: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (SUSE-SU-2026:4044-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:4044-1 advisory. This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in...

RHEL 7 : libvirt (RHSA-2026:69114)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69114 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems...

RHEL 10 : libarchive (RHSA-2026:69553)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69553 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660...

EulerOS Virtualization 2.10.0 : curl (EulerOS-SA-2026-3865)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Integer overflow vulnerability has been found in 'builtin.c' program file of gawk. This issue may lead to memory exhaustion on the...

CVE-2026-94030

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...